Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS10648.roa
File: AS10648.roa (raw, json)
Hash identifier: led6RA1V2e42xVdFwtrKWNd2oYIWbBQ1v7vw4sqrqF0=
Subject key identifier: 17:FE:0B:E0:46:53:B6:E1:F8:DD:73:3B:70:52:2D:0B:74:37:B8:0A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5840F1B7EAED03F090C4B0BA334B7044EF34159E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS10648.roa
Signing time: Tue 01 Sep 2026 09:20:36 +0000
ROA not before: Tue 01 Sep 2026 09:15:36 +0000
ROA not after: Tue 31 Aug 2027 09:20:36 +0000
asID: 10648
IP address blocks: 186.241.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:40:f1:b7:ea:ed:03:f0:90:c4:b0:ba:33:4b:70:44:ef:34:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 1 09:15:36 2026 GMT
Not After : Aug 31 09:20:36 2027 GMT
Subject: CN=17FE0BE04653B6E1F8DD733B70522D0B7437B80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:75:15:01:99:db:be:a3:08:0c:99:e9:b9:
70:dd:4f:b9:37:07:2c:db:86:44:f1:8c:76:5a:09:
5b:38:3b:03:d5:16:d3:ae:ed:b0:75:b2:b0:85:09:
63:22:b7:28:48:0d:cf:3e:61:7e:74:4c:81:76:76:
71:13:63:4c:99:37:b6:31:98:0f:2f:a2:f5:df:13:
09:91:1a:97:6f:ac:73:45:f7:ee:88:d1:95:96:8a:
d6:07:9d:aa:e7:72:6f:cf:de:b1:28:c4:3c:de:67:
e6:6b:7c:0c:00:dc:e4:62:6b:e8:51:6b:3e:f1:1b:
62:49:33:46:60:a6:41:41:07:7b:e1:9a:db:96:20:
62:42:97:c5:05:6d:63:c8:63:7c:09:b9:04:27:7d:
c3:ad:fe:43:9f:01:64:de:f0:28:6f:46:9b:51:dd:
b1:5e:3d:c5:e1:76:47:d9:86:44:65:c4:31:a0:b1:
f5:7b:2b:12:f9:f9:f5:8c:8f:42:86:bd:28:3d:77:
ea:77:5b:14:d0:f4:5d:b4:dc:1e:a6:c7:21:bd:ae:
ac:7e:fb:b6:a3:da:69:8e:46:92:f6:7f:81:fc:ec:
6f:b6:95:b4:40:0b:d3:26:d7:16:70:54:2d:46:79:
f0:ea:30:bc:a2:38:88:ef:40:23:5b:4d:4d:75:51:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:0B:E0:46:53:B6:E1:F8:DD:73:3B:70:52:2D:0B:74:37:B8:0A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS10648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fb:dc:f1:aa:3e:b1:17:f8:63:58:ed:ab:d4:23:a1:a5:06:
e4:fe:24:8f:95:0c:0e:67:b1:5b:8a:e8:c1:3c:d2:20:20:2a:
68:9e:d6:dd:4b:cb:59:a1:f5:ae:93:0b:e9:51:28:45:19:78:
c1:8a:b1:ef:42:12:62:91:ea:a4:df:48:ba:c5:a3:29:91:49:
97:9a:6c:c8:74:89:cd:01:ea:2e:df:c5:5d:6f:e7:ca:c8:f5:
72:4d:65:13:0a:fb:ab:45:20:f3:16:0f:3f:26:f2:77:3d:67:
9f:57:77:88:3d:4d:35:c2:75:66:99:f0:bd:d8:7b:16:d1:77:
aa:d8:44:b5:de:f2:54:f8:7c:11:c2:49:9a:92:ea:e4:43:a9:
82:e4:fa:25:a9:14:8e:9e:10:ba:58:16:46:c3:64:04:3c:e2:
86:1d:46:db:23:08:40:23:73:e6:49:1f:87:33:3e:c1:f5:33:
36:51:c4:f4:e7:b6:9f:ef:c2:31:78:4e:d2:04:ca:bd:8c:8b:
19:a2:a2:1a:e2:f2:26:27:ee:fb:82:57:ab:07:58:0c:47:28:
54:ef:80:0d:ba:f0:a6:8e:47:39:e4:4b:17:bb:d8:5c:42:d7:
07:eb:49:8c:f9:f0:1c:eb:47:7a:76:27:27:0f:d4:fe:cf:4a:
58:dd:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:37 2026 by rpki-client